PoC-CVE-2021-4034

PoC-CVE-2021-4034 Referencia del PoC https://github.com/arthepsy/CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Uso: gcc PoC.c -o PoC ./PoC...

CVE-2026-31431.c

CVE-2026-31431.c Este contenido se proporciona únicamente con fines educativos. El autor no asume ninguna responsabilidad ni obligación por errores u omisiones en el contenido. Toda la información se proporciona "tal cual", sin garantías de integridad, precisión, utilidad o actualidad. Cualquier...

xalgorix

Xalgorix — 취약점을 입증 하는 오픈소스 AI 침투 테스터 대부분의 스캐너는 탐지합니다. Xalgorix는 입증합니다. 자율 LLM 에이전트가 전체 침투 테스트 방법론을 수행한 뒤, 독립적인 검증기가 보고되기 전에 모든 발견 사항을 재익스플로잇 합니다 — 따라서 분류해야 할 불확실한 항목 더미가 아니라 증거를 얻게 됩니다. 셀프 호스팅, 프라이빗, 그리고 자체 LLM 사용BYOL. Go + TypeScript로 제작되었습니다. 🚀 빠른 시작 · 💡 Xalgorix를 선택하는 이유 · ✨ 기능 · 🎯 사용 사례 · ☁️...

log4jhound

log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...

CVE-2023-38646

Metabase Metabase is an open source business intelligence tool that lets you create charts and dashboards using data from a variety of databases and data sources. It’s a popular project, with over 33k stars on GitHub and has had quite a lot of scrutiny from a vulnerability research perspective in...

faraday

Gestor de Vulnerabilidades de Código Abierto La seguridad tiene dos tareas difíciles: diseñar formas inteligentes de obtener nueva información y hacer un seguimiento de los hallazgos para mejorar los esfuerzos de remediación. Con Faraday, puedes centrarte en descubrir vulnerabilidades mientras...

CVE-2019-0708

RDP Proof of Concept This is the proof of concept source code for CVE-2019-0708...

pocsuite3

pocsuite3 Aviso legal El uso de pocsuite3 para atacar objetivos sin el consentimiento mutuo previo es ilegal. pocsuite3 es solo para fines de pruebas de seguridad. 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Resumen pocsuite3 es un framework de pruebas de vulnerabilidades remotas y...

cnc-relay

cnc-relay During a red team exercise it's common to set up a relaying infrastructure to seperate your external facing footprint from the actual command and control backend. Some of the popular light-weight options are to set up either HAProxy or NGINX on disposable cloud infrastructure and proxy...

aura

.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Source code auditing and static code analysis Aura is a static analysis framework developed as a...

rootend

rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |\ /\ / / \ /\ ...

vulhub

Vulhub es una colección de código abierto de entornos vulnerables Docker preconstruidos y listos para usar. Con un solo comando puedes lanzar un entorno vulnerable para investigación de seguridad, aprendizaje o demostración, sin necesidad de experiencia previa con Docker. 中文版本Versión en chino...

libsrtp

Introducción a libSRTP Este paquete proporciona una implementación del Protocolo de transporte seguro en tiempo real SRTP, la Transformada de Seguridad Universal UST y un núcleo criptográfico de soporte. La API de SRTP está documentada en include/srtp.h, y la biblioteca está en libsrtp2.a después...

PatrowlHears

Codacy Badge PatrowlHears PatrOwl provides scalable, free and open-source solutions for orchestrating Security Operations and providing Threat Intelligence feeds. PatrowlHears is an advanced and real-time Vulnerability Intelligence platform, including CVE, exploits and threats news. Try it now! T...

xwf-yara-scanner

Overview This X-Ways Forensics X-Tension allows the use of YARA within X-Ways natively. It uses both the X-Ways Forensics API and the YARA API to achieve this. Note: This is an open source project, not a formal CrowdStrike product. There are many benefits to running YARA within X-Ways, versus...

kurukshetra

Kurukshetra Kurukshetra es un framework web desarrollado con el objetivo de ser el primer framework de código abierto que proporciona una base sólida para alojar desafíos de codificación segura razonablemente complejos, al tiempo que ofrece la capacidad de ejecutar cada desafío de manera eficient...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

bitcrook

Bitcrook Centralize and expedite OSINT investigations View the roadmap Table of Contents Information About Disclaimer Changelog Preview Attributions Usage Installation CLI GUI Docker Authentication Information About Bitcrook is an open-source intelligence apparatus that aims to centralize all of...

byob

¿Preguntas? Consulta la documentación o únete a nuestro servidor de soporte en Discord Descargo de responsabilidad : Este proyecto debe ser utilizado solo para pruebas autorizadas o fines educativos. BYOB es un framework de post-explotación de código abierto para estudiantes, investigadores y...

apkx

apkx - Android APK Decompilation for the Lazy A Python wrapper to popular free dex converters and Java decompilers. Extracts Java source code directly from the APK. Useful for experimenting with different converters/decompilers without having to worry about classpath settings and command line arg...